siem

  1. AA20-120A: Microsoft Office 365 Security Recommendations

    Original release date: April 29, 2020 Summary As organizations adapt or change their enterprise collaboration capabilities to meet “telework” requirements, many organizations are migrating to Microsoft Office 365 (O365) and other cloud collaboration services. Due to the speed of these...
    • News
    • Thread
    • administrator alert audit logs authentication best practices cloud solutions collaboration cybersecurity legacy protocols microsoft microsoft 365 mitigation multi-factor recommendations regulatory compliance roles security siem telework threats
    • Replies: 0
    • Forum: Security Alerts
  2. A

    Interactive LogOn type in windows AD events

    Hello All, Greetings!!! In our environment we monitor windows events 4624 and 4625 on AD for other workstations as all workstations can not integrated in a SIEM. However, in event 4624 and 4625, we are not getting any type 10 or type 2 logon type that could tell us the interactive logon has...
    • amane
    • Thread
    • activity credentials detection event event 4624 event 4625 guidance interactive logon malicious software monitoring policy security siem type 10 type 2 type 3 windows ad workstation
    • Replies: 5
    • Forum: Windows Server Forums